CVE-2016-20044 PInfo 0.6.9-5.1 Local Buffer Overflow via -m Parameter
HighCVSS 8.6
EPSS 0.25%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PInfo 0.6.9-5.1 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -m parameter. Attackers can craft a malicious input string with 564 bytes of padding followed by a return address to overwrite the instruction pointer and execute shellcode with user privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/pinfo(Debian:11) | All versions | No fix listed |
| debian/pinfo(Debian:11) | = 0.6.13-1.1 | No fix listed |
| debian/pinfo(Debian:11) | = 0.6.13-1.2 | No fix listed |
| debian/pinfo(Debian:11) | = 0.6.13-1.3 | No fix listed |
| debian/pinfo(Debian:11) | = 0.6.13-1.4 | No fix listed |
| debian/pinfo(Debian:11) | = 0.6.13-2 | No fix listed |
| debian/pinfo(Debian:12) | All versions | No fix listed |
| debian/pinfo(Debian:12) | = 0.6.13-1.3 | No fix listed |
| debian/pinfo(Debian:12) | = 0.6.13-1.4 | No fix listed |
| debian/pinfo(Debian:12) | = 0.6.13-2 | No fix listed |
| debian/pinfo(Debian:13) | All versions | No fix listed |
| debian/pinfo(Debian:13) | = 0.6.13-2 | No fix listed |
| debian/pinfo(Debian:14) | All versions | No fix listed |
| debian/pinfo(Debian:14) | = 0.6.13-2 | No fix listed |
| ubuntu/pinfo(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/pinfo(Ubuntu:26.04) | All versions | No fix listed |
| PInfo | = 0.6.9-5.1 | No fix listed |
| ubuntu/pinfo(Ubuntu:26.10) | All versions | No fix listed |
| surf pinfo | <= 0.6.9-5.1 | No fix listed |
| ubuntu/pinfo(Ubuntu:22.04) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- security-tracker.debian.org vendor-advisory
- ExploitDB-40023 exploit vdb-entry
- Official Product Homepage broken-link product
- VulnCheck Advisory: PInfo 0.6.9-5.1 Local Buffer Overflow via -m Parameter third-party-advisory